Static task
static1
Behavioral task
behavioral1
Sample
187216df31755589db8886dfd93c9786.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
187216df31755589db8886dfd93c9786.exe
Resource
win10v2004-20231222-en
General
-
Target
187216df31755589db8886dfd93c9786
-
Size
1.2MB
-
MD5
187216df31755589db8886dfd93c9786
-
SHA1
7c19fb37358b46c3e464a36ad2ef72b2c0b7449f
-
SHA256
cb4a995778be15bb28136134854d04e6f556d15d14071678ff1b16456e4833a8
-
SHA512
df23fb8565e33599eb0561ff0d54440a3b938d9e0325a85070fa9ea1462639fb56bf71c71711ac02f2813371a78e4596e1d71e68eb522ac1dc2cd5d823599406
-
SSDEEP
24576:dsDnErDnEj8o+Wh30o9jRwEPQXAzJSR9O08k8sVW40Pyd:CDnuDnW8dWhEaRwEmLr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 187216df31755589db8886dfd93c9786
Files
-
187216df31755589db8886dfd93c9786.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ